Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38352e3132302e302f32322d3234203d3e203535363939.roa
File:                     3130332e38352e3132302e302f32322d3234203d3e203535363939.roa (raw, json)
Hash identifier:          he/QQqfD0seysjNviv3Za3tlQv2tDXebkb/nKVJM/3E=
Subject key identifier:   25:99:57:D9:70:01:16:18:D6:30:35:6D:41:7A:AA:6C:33:FC:B5:51
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5A490E83D4CFDDB389289F2A5CD30F2DD3BF6DF9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38352e3132302e302f32322d3234203d3e203535363939.roa
Signing time:             Wed 27 Oct 2021 09:00:00 +0000
ROA not before:           Wed 27 Oct 2021 08:55:00 +0000
ROA not after:            Thu 27 Oct 2022 09:00:00 +0000
asID:                     55699
IP address blocks:        103.85.120.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:49:0e:83:d4:cf:dd:b3:89:28:9f:2a:5c:d3:0f:2d:d3:bf:6d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 27 08:55:00 2021 GMT
            Not After : Oct 27 09:00:00 2022 GMT
        Subject: CN=3082010A0282010100A92EC51DB97B16D77AEBDC10F53B82F8EFFF19E20CF959E48DA09B080352E4A1072D3833173A0A9F0F9307288D8D6BC0758009DFBA46FC85BE2AF44A9A9A4325DB2FD8E570713E6912A39DF8E191BD7A7CF4BF11C29D244568EC06C7DEB5D876641E8512F881155C991E40A5571D9BA916CDAFB143315E014D6DBC5E4CD1BBA6B6A78B4128EF762EAD8E2179A99DFF815286D204F2595F76AAE951FBF7BC806431296203C6BFBEA1B7D864987002F63E121ADEC4C8BF8D4345FA82FA04DF9B6DC8509329AC2B10F3949C48FF4407C85F78187AF5836B4EF4E6024012020DC0FDA08D00E1579EF084B22B6C45A98987E4B2751E34999E792580258CF150BC19770203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:c5:1d:b9:7b:16:d7:7a:eb:dc:10:f5:3b:
                    82:f8:ef:ff:19:e2:0c:f9:59:e4:8d:a0:9b:08:03:
                    52:e4:a1:07:2d:38:33:17:3a:0a:9f:0f:93:07:28:
                    8d:8d:6b:c0:75:80:09:df:ba:46:fc:85:be:2a:f4:
                    4a:9a:9a:43:25:db:2f:d8:e5:70:71:3e:69:12:a3:
                    9d:f8:e1:91:bd:7a:7c:f4:bf:11:c2:9d:24:45:68:
                    ec:06:c7:de:b5:d8:76:64:1e:85:12:f8:81:15:5c:
                    99:1e:40:a5:57:1d:9b:a9:16:cd:af:b1:43:31:5e:
                    01:4d:6d:bc:5e:4c:d1:bb:a6:b6:a7:8b:41:28:ef:
                    76:2e:ad:8e:21:79:a9:9d:ff:81:52:86:d2:04:f2:
                    59:5f:76:aa:e9:51:fb:f7:bc:80:64:31:29:62:03:
                    c6:bf:be:a1:b7:d8:64:98:70:02:f6:3e:12:1a:de:
                    c4:c8:bf:8d:43:45:fa:82:fa:04:df:9b:6d:c8:50:
                    93:29:ac:2b:10:f3:94:9c:48:ff:44:07:c8:5f:78:
                    18:7a:f5:83:6b:4e:f4:e6:02:40:12:02:0d:c0:fd:
                    a0:8d:00:e1:57:9e:f0:84:b2:2b:6c:45:a9:89:87:
                    e4:b2:75:1e:34:99:9e:79:25:80:25:8c:f1:50:bc:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:99:57:D9:70:01:16:18:D6:30:35:6D:41:7A:AA:6C:33:FC:B5:51
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38352e3132302e302f32322d3234203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:62:c4:90:b7:da:46:97:97:ce:50:08:ca:6a:4c:69:71:3e:
         aa:68:65:f7:dc:58:be:5a:ea:7f:88:ee:93:77:28:9d:83:78:
         72:36:46:5f:06:5b:c9:b3:35:74:c3:b5:1a:6f:be:83:84:92:
         d4:15:28:d6:8c:d5:bc:76:ac:82:4b:08:1c:26:b1:81:94:d1:
         71:7c:ff:78:86:e2:15:65:52:a7:17:d4:bb:4b:09:3d:9f:72:
         d7:d7:46:be:f6:39:bc:87:e7:51:a6:ca:7e:80:1a:d2:fc:cc:
         c1:c8:04:97:ff:f9:b6:ac:9f:e3:55:f9:82:35:71:1f:6a:f6:
         a6:58:2e:89:43:23:dd:31:78:7a:44:50:d0:e6:75:ff:fc:d1:
         69:96:c5:e5:66:d5:6f:34:66:be:2e:a0:62:1b:39:f2:96:22:
         1a:2e:3e:a1:fc:b7:c1:f9:6d:36:38:07:0d:51:61:c6:50:10:
         12:e0:4b:22:b5:ec:28:6c:14:fb:37:5a:28:f8:bb:4c:58:4a:
         80:29:f8:0a:8f:69:4a:ac:49:25:d9:66:c0:ec:15:48:f0:95:
         8b:e9:43:a1:13:7e:5c:9d:df:61:1b:06:1e:14:ce:ba:a6:55:
         6c:e6:60:bd:07:21:0f:af:77:aa:94:5d:23:bd:05:a2:fb:90:
         a3:58:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----